281 karma · joined January 26, 2023
Zuck serves ads/spywares to other users, he deserves to taste his own medicines, not me.
Backup emails on main proton is not hard and wouldn't damage much, but I have different alias services for different sites on simplelogin and I would end up having to change emails on all those sites if simplelogin simply lock my account out of the blue.
At most, I would just see that they are annoyed by the issue procedures (without PRs) of the "researchers" and they complaint on the social. I don't agree with their complaints because the "researchers" did nothing wrong either. And that's it, I would stop at that. Putting the whole "duty", "valuable reports" and "demand more" on them is just as bs as their complaints.
But don't take it further that the maintainers have the duty to fix the issues. They choose that career, don't make it sound like ffmpeg is forcing them to disclosure. Maintainers don't "deal" with any security researchers about those, and don't put the confidence that it "benefits maintainers" than "benefit researchers", unless the maintainers declare that themselves. In this case there's no patch, no fix, no PR either, just issue-submission. "You have more benefits" are the claims of the researchers who think that their issue-submission contributions top everything else.
Finding and disclosing the security are issue-submission contributions, and that's it. Don't make it as a gift or something. ffmpeg doesn't have the need to find these issues, and they don't pay for it for it either. And vice versa, they have no duties to fix the issues. They don't force the security researchers to find and disclose things. If security researchers want to do it themselves, they can do whatever they want, but stop at forcing duties to the maintainers. The only thing I don't agree with ffmpeg is bringing those issues social while they can just ignore them, that's it.
If you want the security issue to be fixed, make a PR or offer the price you are willing to pay for them to fix.
I want to interfere websites' javascripts to block the ads that are not addressed by the extensions without the need to write whole userscripts. For example, stopping/replacing an inline script, pruning the ads/annoyances out of the JSONs, replacing the arguments of a native function, setting the constants of global variables to any values I want, preventing `setTimeout`, `setInterval`, `eval`, removing event listeners on the elements I want, removing/replacing/setting the attributes' values of the elements I want... and the list goes on. I can do these with uBO.
I want to strip out/replace the fingerprinted JSON data in the request headers of the XHR/fetch requests. I can do this with uBO.
I want to block YouTube from delivering bs AI dub audio by default to me. I can do this with uBO.
I want to not let the websites go through the trackers before redirecting to the destination link if the destination link already appears in the URL. I can do this with uBO.
I want to strip out any tracking parameters of a URL that I want without the need to wait for the extension to approve and update for me. I can do this with uBO.
I want to block and redirect the resources to the neutralized resources built inside uBO, or redirect to any other domains/URLs that I want without the need to report and wait for the extension to approve and update for me. I can do this with uBO.
I want to set the iframes not load by default and just put a placeholder which I can choose which one I want to load by clicking on it. I can do this with uBO.
I want to by default block 3rd-party resources (`script`, `iframe`, `images`, `xhr`...) and only whitelist which domains/URLs I trust locally/globally via simple clicking/tapping. I can do this with uBO.
I want to set the websites to `noscript` mode by default and only set the websites I want to run javascript by myself. I can do this with uBO.
The key here is "custom". It's about how free I am to block things ("things" on websites are not just elements to hide or network requests to block) on the websites for myself with the extension, not reporting and hoping the extension to approve and update for me; and not bother to write my own extensions or userscripts.
No, it's not. They use the same lists as uBO's. There's literally nothing called "blends in better" here, and there's no definition and proof of it either.